Hi Daniel On 11/13/18 8:44 AM, Daniel.Krefft@xxxxxx wrote:
Hi all, I was wondering about the current state of available security modules (e.g. Access Control Lists, MAC, etc.) with an applied RT PREEMPT Patch.
The -rt patch set does not change anything regarding the security modules. This means you have the same properties as with mainline.
The following questions come to mind: 1) Is there a security module available that can be used with a current RT PREEMPT Patch?
All existing modules should work.
1.1) Yes, which limitation or configuration of a security module needs to be considered?
Since there is no change from the -rt patch you get all properties from mainline.
1.2) No, what are the unsolved problems on the way for realizing such a support? 2) In general, what are the common problems to support security modules, beside their timing conditions (i.e. latency, determinism), in realtime systems (e.g. i/o, memory)?
There shouldn't be any problems. At least I am not aware of any.
3) Is there any documentation (beside the code) about the usage of security modules with a RT PREEMPT patched kernel available?
There is none specific for -rt. Hope that helps. Thanks, Daniel
